Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 21 vulnerabilities (USN-8677-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8677-1 advisory. It was discovered that the JSSE component of OpenJDK 21 did not correctly authenticate users. A remote attacker could...

Ubuntu 26.04 LTS : CRaC JDK 21 vulnerabilities (USN-8694-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8694-1 advisory. It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 11 vulnerabilities (USN-8674-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8674-1 advisory. It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 8 vulnerabilities (USN-8673-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8673-1 advisory. It was discovered that the JSSE component of OpenJDK 8 did not correctly authenticate users. ...

Ubuntu 26.04 LTS : OpenJDK 26 vulnerabilities (USN-8689-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8689-1 advisory. It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 25 vulnerabilities (USN-8681-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8681-1 advisory. It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly us...

tiny_tracer

tinytracer Una herramienta Pin para rastrear: llamadas a la API, incluyendo entrada y salida de funciones seleccionadas funciones locales definidas, y funciones de bibliotecas enlazadas estáticamente instrucciones seleccionadas: RDTSC, CPUID, INT llamadas al sistema en línea, incluyendo parámetro...

retire.js

Retire.js Retire Status Ciò che richiedi, devi anche ritirarlo Esiste una pletora di librerie JavaScript utilizzabili sul Web e nelle app Node.JS. Questo semplifica enormemente lo sviluppo, ma dobbiamo rimanere aggiornati sulle correzioni di sicurezza. "L'utilizzo di componenti con vulnerabilità...

marshalsec

Java Unmarshaller Security - Trasformare i tuoi dati in esecuzione di codice Se sei arrivato qui per Log4Shell/CVE-2021-44228, potresti voler leggere i vettori di sfruttamento e le versioni del runtime Java interessate: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper Sono...

DEBIAN-CVE-2026-44038

A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries dcmjpeg/libijg8, libijg12 and libijg16 of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extendtest and extendoffset tables, causing incorrectly decoded pixel data or a crash, via a DICOM file wit...

CVE-2026-44038

A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries dcmjpeg/libijg8, libijg12 and libijg16 of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extendtest and extendoffset tables, causing incorrectly decoded pixel data or a crash, via a DICOM file wit...

CVE-2026-44038

OFFIS DCMTK 3.7.0 is vulnerable to a global out-of-bounds read within the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12, and libijg16). The root cause is a lack of range-checking on Huffman symbol values, which allows an attacker to read memory beyond the extend_tes...

EUVD-2026-94941

A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries dcmjpeg/libijg8, libijg12 and libijg16 of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extendtest and extendoffset tables, causing incorrectly decoded pixel data or a crash, via a DICOM file wit...

PT-2026-107947

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK version 3.7.0 Description A global out-of-bounds read exists in the Huffman decoder of the bundled IJG JPEG libraries dcmjpeg/libijg8, libijg12, and libijg16. This occurs when processing a DICOM file containing a crafted JPEG strea...

CVE-2026-44038: Out-of-bounds Read

A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries dcmjpeg/libijg8, libijg12 and libijg16 of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extendtest and extendoffset tables, causing incorrectly decoded pixel data or a crash, via a DICOM file wit...

CLSA-2026-1791281041 TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 11 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.5...

[SECURITY] Fedora 45 Update: ocaml-SDL-0.9.1-80.fc45

Runtime libraries to allow programs written in OCaml to write to SDL Simple DirectMedia Layer interfaces...

[SECURITY] Fedora 45 Update: libabigail-2.10-4.fc45

The libabigail package comprises seven command line utilities: abidiff, kmidiff, abipkgdiff, abicompat, abidw, and abilint. The abidiff command line tool compares the ABI of two ELF shared libraries and emits meaningful textual reports about changes impacting exported functions, variables and the...

[SECURITY] Fedora 45 Update: kdelibs3-3.5.10-138.fc45

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves.

Summary IBM Maximo Application Suite uses busboy 3.2.0, cryptography 46.0.7, browserslist 4.24.4, form-data 2.5.5, brace-expansion 1.1.14, socket.io-parser 4.2.6, fast-xml-parser 5.9.3, immutable 5.1.5, postcss 8.5.15, libarchive 3.5.3-9.el97, dompurify 3.4.0, ip-address 10.1.1, fast-uri 3.1.2,...